Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier: w7UB67dbhybq0WfHioMxTUQI2imdHUUEtvkF5x5qers=
Subject key identifier: D4:2B:C9:AA:8D:D5:9D:F7:C3:5B:D3:EE:E8:E8:E4:80:5B:63:5F:E3
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial: 019698614A34C357FF151F5ED2F84CE37492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number: 0111
Signing time: Sat 03 May 2025 23:00:34 +0000
Manifest this update: Sat 03 May 2025 23:00:34 +0000
Manifest next update: Sun 04 May 2025 23:00:34 +0000
Files and hashes: 1: 3rwXWtFbCIuCgGU96PeqAGUhWU4.roa (hash: rp0bCqxBlPPCcVLUBh0MkWETtPWfiqbHwRVpOhMjnK4=)
2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: AR1D4IewOjYqMf/YyHrYWQ3bEUylSAXYbIm9i5vZcyM=)
3: wmuRmPBv_IlkfBBV-hF7o6UUILQ.roa (hash: hs6pyaykF/zQtIhils9uIo2Funb7iBy2l/PAgFXmXMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:98:61:4a:34:c3:57:ff:15:1f:5e:d2:f8:4c:e3:74:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Validity
Not Before: May 3 23:00:34 2025 GMT
Not After : May 4 23:00:34 2025 GMT
Subject: CN=d42bc9aa8dd59df7c35bd3eee8e8e4805b635fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:12:ec:4e:9e:21:65:d2:a0:0d:a2:e3:eb:f3:
cc:6a:cb:b2:30:96:27:04:e7:e2:50:b5:08:22:5e:
90:1c:25:e1:32:d4:2c:25:df:48:40:39:25:e8:bb:
e8:33:2a:02:92:73:82:42:55:94:d3:3d:b3:9c:4f:
eb:bc:20:5a:98:37:f7:be:ee:d3:f8:85:3d:7d:af:
82:48:34:57:36:83:4c:5e:a2:52:19:d4:9c:ab:a8:
48:cb:20:30:56:19:a6:6a:e7:d0:87:9a:91:79:ce:
17:45:b8:f5:c8:b2:6e:d5:2a:6f:b6:84:1f:76:d9:
dc:b7:b8:34:bb:70:5f:c1:e8:32:a4:ac:24:9f:97:
37:fd:6f:c7:05:7a:7d:7c:2b:eb:e2:ec:be:f0:56:
4a:5e:51:d2:bb:bc:ed:62:4a:42:dd:98:b1:d1:30:
37:18:86:61:1f:e9:93:e5:b0:a6:d7:07:72:58:05:
fa:47:28:8e:d9:ad:5b:99:20:bc:47:c8:49:a2:b5:
15:be:da:b2:f9:ca:10:7a:fd:12:e3:3e:5e:bb:7a:
66:bb:b8:43:80:aa:91:c7:87:95:bf:a4:dd:06:f8:
ab:63:dc:50:7d:fc:92:ed:8c:31:1c:e5:bd:be:91:
f0:a7:01:c3:fd:22:a0:58:ff:4c:cf:a9:4e:ba:fd:
b8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2B:C9:AA:8D:D5:9D:F7:C3:5B:D3:EE:E8:E8:E4:80:5B:63:5F:E3
X509v3 Authority Key Identifier:
keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b6:28:00:f7:81:f5:3a:e5:74:10:fb:1d:9f:42:c8:27:bb:
2f:56:08:ed:33:b7:e4:fc:c0:6c:9e:15:8b:17:00:d1:ec:3f:
51:b5:3b:c8:95:81:55:3e:d3:21:54:2d:71:87:af:57:ae:07:
b1:11:50:f2:b0:7d:c8:5d:f6:fc:b6:da:1e:12:66:d3:9b:ec:
4b:c9:5d:eb:14:52:e9:c5:7f:55:18:62:0e:67:24:f2:f2:41:
43:ba:30:ff:23:01:7b:b3:60:64:04:21:89:25:a5:aa:4e:1a:
30:fb:2c:2e:8f:e8:1c:8b:ce:ac:71:c8:10:cc:e3:08:f7:1c:
56:7e:62:8d:0c:c2:c3:c8:50:92:4b:13:1a:1d:b9:7a:4b:e8:
2e:67:f4:4b:f6:25:7f:9c:5d:86:73:ef:4f:33:00:90:6c:44:
1b:06:49:98:51:56:16:0c:3f:de:80:c9:1d:25:f8:a2:e4:89:
ab:77:d9:db:8f:47:b8:08:21:85:87:ac:1d:fc:1d:0f:ea:7b:
10:1f:2b:82:b5:cd:cd:51:c3:0c:e9:0f:f3:b5:77:93:b5:eb:
00:c7:f5:b8:98:a4:ee:aa:64:6b:c0:ca:32:2c:0f:d3:a1:76:
7e:82:2f:59:1f:b6:e8:9f:0b:00:7f:e1:6b:ad:1e:c5:5a:b3:
a0:59:47:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaYYUo0w1f/FR9e0vhM43SSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MjEwMGYwYjE5OTFkODBhNDY0MjFkOWZlNTE0N2YyZDU1
YWM5MzAwHhcNMjUwNTAzMjMwMDM0WhcNMjUwNTA0MjMwMDM0WjAzMTEwLwYDVQQD
EyhkNDJiYzlhYThkZDU5ZGY3YzM1YmQzZWVlOGU4ZTQ4MDViNjM1ZmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RLsTp4hZdKgDaLj6/PMasuyMJYn
BOfiULUIIl6QHCXhMtQsJd9IQDkl6LvoMyoCknOCQlWU0z2znE/rvCBamDf3vu7T
+IU9fa+CSDRXNoNMXqJSGdScq6hIyyAwVhmmaufQh5qRec4XRbj1yLJu1SpvtoQf
dtnct7g0u3BfwegypKwkn5c3/W/HBXp9fCvr4uy+8FZKXlHSu7ztYkpC3Zix0TA3
GIZhH+mT5bCm1wdyWAX6RyiO2a1bmSC8R8hJorUVvtqy+coQev0S4z5eu3pmu7hD
gKqRx4eVv6TdBvirY9xQffyS7YwxHOW9vpHwpwHD/SKgWP9Mz6lOuv24xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQryaqN1Z33w1vT7ujo5IBbY1/jMB8GA1UdIwQY
MBaAFAghAPCxmR2ApGQh2f5RR/LVWskwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQt
NDA5ODlkMGRmYzVjLzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQtNDA5ODlkMGRmYzVj
LzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbYoAPeB
9TrldBD7HZ9CyCe7L1YI7TO35PzAbJ4VixcA0ew/UbU7yJWBVT7TIVQtcYevV64H
sRFQ8rB9yF32/LbaHhJm05vsS8ld6xRS6cV/VRhiDmck8vJBQ7ow/yMBe7NgZAQh
iSWlqk4aMPssLo/oHIvOrHHIEMzjCPccVn5ijQzCw8hQkksTGh25ekvoLmf0S/Yl
f5xdhnPvTzMAkGxEGwZJmFFWFgw/3oDJHSX4ouSJq3fZ249HuAghhYesHfwdD+p7
EB8rgrXNzVHDDOkP87V3k7XrAMf1uJik7qpka8DKMiwP06F2foIvWR+26J8LAH/h
a60exVqzoFlHxw==
-----END CERTIFICATE-----
Generated at Sun May 4 08:26:43 2025 by rpki-client